{"id":71283,"date":"2026-04-17T10:20:17","date_gmt":"2026-04-17T10:20:17","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/sanctioned-exchange-grinex-hit-by-13-7m-hack-blames-foreign-intelligence-services\/"},"modified":"2026-04-17T10:20:17","modified_gmt":"2026-04-17T10:20:17","slug":"sanctioned-exchange-grinex-hit-by-13-7m-hack-blames-foreign-intelligence-services","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/sanctioned-exchange-grinex-hit-by-13-7m-hack-blames-foreign-intelligence-services\/","title":{"rendered":"Sanctioned Exchange Grinex Hit by $13.7M Hack; Blames Foreign Intelligence Services"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<p><strong>Key Takeaways:<\/strong><\/p>\n<ul>\n<li>Grinex halts operations after a state-level hack drains over 1 billion rubles in <span>USDT<\/span> from user wallets.<\/li>\n<li>The 2025 takeover of Garantex solidified Grinex as a primary target for ongoing U.S. sanctions.<\/li>\n<li>Law enforcement is reviewing logs from 54 wallets as Grinex seeks to recover 13.74 million <span>USDT<\/span> in stolen <span>TRX<\/span>.<\/li>\n<\/ul>\n<h2>Allegations of State-Sponsored Interference<\/h2>\n<p>Grinex, a crypto-ruble exchange serving Russian businesses and individual investors, has suspended operations after a sophisticated cyberattack. The breach resulted in the theft of digital assets valued at approximately $13.74 million (more than 1 billion rubles) in the <span>stablecoin<\/span> <span>USDT<\/span>.<\/p>\n<p>The exchange, which remains under U.S. sanctions, <a href=\"https:\/\/grinex.io\/\" target=\"_blank\" rel=\"noopener noreferrer\">claims<\/a> the \u201cunprecedented\u201d hack suggests the involvement of foreign intelligence agencies from \u201chostile states.\u201d<\/p>\n<p>According to preliminary forensic data provided by the exchange, the attackers\u2019 digital footprint indicates a level of coordination typically reserved for state-level actors. A spokesperson for the exchange said the attack was a deliberate attempt to destabilize the domestic financial sector and harm Russia\u2019s financial sovereignty.<\/p>\n<p>\u201cFrom the very beginning, the exchange\u2019s infrastructure has been subject to attacks,\u201d the spokesperson said. \u201cThe exchange was placed on sanctions lists, <span>crypto<\/span> wallets were targeted, and transactions were blocked. Today, attempts to destabilize the domestic financial sector have reached a new level \u2014 the direct theft of assets.\u201d<\/p>\n<p>Grinex remains a target of U.S. and international sanctions intended to isolate the exchange from the global financial system. The company gained prominence in 2025 after absorbing the client base and infrastructure of Garantex, another exchange shuttered by Western <a href=\"https:\/\/news.bitcoin.com\/garantex-website-replaced-by-feds-seizure-notice-in-coordinated-cyber-operation\/\">regulatory pressure<\/a>.<\/p>\n<p>According to Grinex, it was involved in the recovery and return of 2.5 billion rubles worth of digital assets previously <a href=\"https:\/\/news.bitcoin.com\/russia-eyes-own-stablecoins-after-usdt-blockage\/\">frozen<\/a> by Tether, the issuer of the <a href=\"https:\/\/buy.bitcoin.com\/?utm_source=News\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">USDT<\/a> <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-are-stablecoins\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">stablecoin<\/a>. The exchange said the stolen funds were drained from dozens of individual wallets, converted into the <a href=\"http:\/\/www.bitcoin.com\/get-started\/a-quick-introduction-to-crypto\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">cryptocurrency<\/a> <a href=\"https:\/\/markets.bitcoin.com\/crypto\/TRX\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">TRX<\/a>, and consolidated into a single destination address.<\/p>\n<p>The exchange has filed a formal criminal complaint and handed over technical logs and digital evidence to law enforcement. There is no projected date for the resumption of services or a formal plan for user reimbursement. While the exchange remains offline, it maintains that these \u201chostile actions\u201d are part of a broader geopolitical effort to restrict digital asset transfers within the Commonwealth of Independent States.<\/p>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/sanctioned-exchange-grinex-hit-by-13-7m-hack-blames-foreign-intelligence-services\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways: Grinex halts operations after a state-level hack drains over 1 billion rubles in USDT from user wallets. The 2025 takeover of Garantex solidified Grinex as a primary target for ongoing U.S. sanctions. Law enforcement is reviewing logs from 54 wallets as Grinex seeks to recover 13.74 [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":71284,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71283"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=71283"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71283\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/71284"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=71283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=71283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=71283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}